Cross-site Scripting Vulnerability in Premmerce Product Search for WooCommerce

CVE-2025-64289

What is CVE-2025-64289?

A Cross-site Scripting (XSS) vulnerability exists in the Premmerce Product Search for WooCommerce plugin that allows attackers to inject malicious scripts into web pages. This vulnerability can lead to the execution of arbitrary scripts in the context of a user's browser, potentially compromising sensitive user information or redirecting users to harmful sites. Affected versions include all installations up to 2.2.4, making it essential for users to update their plugins to mitigate the risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References